You definitely want all of your validation and authentication to occur at the lowest common denominator point. You don't want to put heavy authentication on one front-end only to have a hole or weak authentication on another front-end. Better to use a common scheme on the back-end (LDAP) and allow the front-ends to just use what's there. It greatly reduces complexity (usually) and is significantly more robust.

I'm a bit unclear why you can't use ACL's (ACI's) in LDAP to do this. Generally you would have the user authenticate against the LDAP database (e.g. by binding to it using their distinguished name) first, and then when they're authenticated, try to do operations as that user (e.g. changing their password). I've only had a small amount of experience with ACI's with a couple of LDAP platforms, but they seemed similar enough for me to think they were the same syntax, but I may not have been looking close enough.

So basically, it seems to me that you should be able to do this by putting all of your access control and authentication in LDAP. Not sure though..

In reply to Re: Access control problem by Fastolfe
in thread Access control problem by gildir

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.